Privacy Policy

Last updated: May 2026

1. Who we are

Calsify (calsify.in) is a portfolio analytics tool for Indian equity investors. We help you analyse holdings, model risk, and track lot-level returns.

2. Data we collect

Account data — email address and name, collected when you sign up via Supabase Auth.
Portfolio data — holdings you upload or enter manually. Stored in our database only if you choose to save a portfolio.
Google account — if you connect Google Sheets, we store OAuth credentials (access token and refresh token) in our Supabase database to sync your holdings to a Sheet you own. We request only the drive.file scope, which limits access to files created by Calsify. We never read, modify, or delete any other files in your Google Drive.
Payment data — if you subscribe to a paid plan, your payment is processed by Razorpay. We store only your subscription tier and expiry date; we never store card or bank details.
Analytics data — if you accept cookies, we collect anonymised page views and performance metrics via Vercel Analytics. No personal data (name, email, IP address) is included. You can decline and the app works fully without analytics.
Usage data — standard server logs (request path, timestamp) for debugging and security. We do not log IP addresses or email addresses in application logs.

3. How we use your data

To provide portfolio analysis and lot-tracking features.
To sync your holdings to your Google Sheet (only when you have connected Google Sheets).
To authenticate you securely across sessions.
To process subscription payments via Razorpay.
To understand aggregate usage patterns and improve the product (analytics, only with your consent).
We do not sell your data to third parties.
We do not use your data for advertising.

4. Google user data

Calsify's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only create and write to the single Google Sheet we create on your behalf.
We never share your Google data with any third party.
You can disconnect Google at any time from your Profile page. This immediately deletes your stored OAuth tokens from our database.

5. Third-party services

Supabase — authentication and database, hosted on AWS. Privacy policy.
Vercel — hosting and analytics (page views, performance metrics, no PII). Only active if you accept cookies. Privacy policy.
Razorpay — payment processing for paid plans. Handles card and bank details directly; we never see or store them. Privacy policy.
Google APIs — Google Sheets and Drive, only when you connect your account.

6. Cookies

We use two types of cookies:

Essential cookies — set by Supabase to manage your login session. These are required for the app to function and are set without consent.
Analytics cookies — set by Vercel Analytics to measure page views and performance. These are only set after you explicitly accept via the cookie banner.

You can change your cookie preference at any time by clearing your browser's local storage for calsify.in.

7. Data storage and security

Account, portfolio, and Google OAuth credentials are stored in Supabase (hosted on AWS), protected by Row-Level Security so only you can access your own data. All data in transit is encrypted via HTTPS.

8. Data retention and deletion

You can delete individual saved portfolios at any time from the Profile page. You can permanently delete your entire account — including all portfolios, reports, and your Google connection — directly from the Danger Zone section of your Profile page. Deletion is immediate and irreversible.

9. Your rights

You have the right to access, correct, export, or delete your personal data at any time. Most of these rights are exercisable directly in the app. For any other requests, contact us at the email below.

10. Contact

Questions about this policy? Email us at support.calsify@gmail.com.